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(54) Telecommunication network 

(57) In a cellular telephone system, subscribers each have a token (such as a smartcard) by means of which they may 
respectively identify themselves to the network. Each subscriber logs into the network by using his smartcard which inputs a 
unique secure identification number (IMSI) into the network. The relationship between each IMSI and the corresponding 
subscriber's telephone number (MSISDN) is random and known only to the network operator, this arrangement facilitating 
simple and secure issue of initial and replacement smartcards. A home location register (HLR) in the network stores each 
subscriber's MSISDN and the associated IMSI. The network also includes an analysis table linking each IMSI with the 
identity of the corresponding HLR storage location. This analysis table is split into parts which are held at different entities, 
such as different mobile services switching centres (MSC), in the network. 
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TELECOMMUNICATION NETWORK 

The invention relates to telecommunication networks by 
means of which a plurality of subscribers may communicate 
with each other* Embodiments of the invention to be 
described in more detail below comprise such 
telecommunications networks in the form o£ telephone 
networks and more especially to such networks involving 
mobiles (such as in a cellular network) which can 
communicate with each other and with fixed telephones via 
a public switched telephone network (PSTN) • One such 
telephone network is the planned pan-European digital 
telephone network (the "GSM" network). 

In the embodiments of the invention to be described, 
subscribers intending to communicate via mobiles will be 
issued with tokens by which they will identify themselves 
when making a call via the system network, such tokens 
being, for example, in the form of so-called 
"smartcards". Such smartcards carry data such as 
identification numbers and other information to ensure 
the security of the system. It is desirable that such 
smartcards can be issued to new subscribers, and that 
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simply, for example, by a retail dealer, but without 
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compromising the securing of the issued smartcard and of 
the system. 

According to the invention, there is provided a 
telecommunication network by means of which a plurality 
of subscribers may communicate with each other, each 
subscriber having a token by means cf which they may 
respectively identify themselves to the network, each 
token causing a unique secure identification number to be 
input into the network, comprising main storage means 
having a plurality of storage locations each for storing 
a respective one of the secure identification numbers and 
a corresponding access number by which the subscriber 
which has the token associated with that identification 
number may be accessed via the network, further storage 
means split into parts each of which is located at a 
different position in the network and each for storing a 
respective part only of an analysis table which links 
each identification number with the identity of the 
corresponding one of the storage locations of the main 
storage means, accessing means responsive to each 
identification number input into the system for accessing 
the relevant part of the further storage means and 



storage locations of the main storage means, 
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extracting means for extracting from that storage 
location the corresponding access number whereby to 
enable calls to and from that subscriber to be set up and 
permitting a random relationship between the 
identification numbers and the access numbers. 

According tc the invention, there is also provided a 
method of operating a cellular telephone network in which 
the subscribers respectively identify themselves to the 
network by means of smartcards which cause respective 
subscriber identification numbers to be input into the 
network via the relevant cells thereof, the 
identification numbers being secure and having a random 
relationship with the subscribers 1 telephone numbers, 
comprising the steps of setting up, in a home location 
register, storage locations for each telephone number 
each of which also stores the corresponding subscriber 
identification number and other subscriber data, setting 
up an analysis table correlating each identification 
number with the corresponding storage location in the 
home location register, storing respective parts of this 
analysis table at different locations in the network, 
responding to an identification number input at a 



the relevant part of the analysis table within the 
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network, obtaining therefrom the storage location of the 
home location register corresponding to the 
identification number, extracting the corresponding 
subscriber's telephone number from that storage location, 
and storing that telephone number in a visitor location 
register associated with the originating cell. 

Part of a cellular telephone network, such as the 
proposed GSM system, embodying the invention will now be 
described, by way of example only, with reference to the 
accompanying diagrammatic drawing which is a block 
diagram of the network. 

The network being described is cellular in operation. 
Communication to and from mobiles in the network is by 
radio link between them and respective base stations, 
each base station defining a cell of the network. When a 
mobile is activated, this is signalled to the base 
station of the cell in which the mobile is currently 
located and the network identifies the mobile and records 
its current location area (a location area comprises a 
group of cells), updating this information as the mobile 
moves from one location area to another. A mobile can 



connected), to a fixed subscriber to the 
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Similarly, calls can be made to the mobile via the 
network from other mobiles or from fixed subscribers to 
the PSTN. In order to enable such calls to be made and 
received, and for call charges to be successfully billed 
to mobile subscribers, it is clearly vital that a proper 
arrangement be incorporated for identifying subscribers 
and ensuring so far as possible that only properly 
authorised subscribers can initiate calls from particular 
mobiles. As a means of achieving these aims, the system 
provides each subscriber with a smartcard. The smartcard 
is pre-programmed with a unigue identification number, 
the "International Mobile Subscriber Identity" (IMSI) 
which is kept secure, that is, it is not visible on the 
card and is not known to the subscriber. In addition, 
each subscriber will be issued with a publicly known 
number, the MSISDN ("Mobile Station International ISDN 
Number"). This is the subscriber's telephone number by 
means of which calls to that subscriber are initiated by 
other subscribers to the system and to the PSTN. 

In order to activate a mobile in the network (so that it 
may make or receive calls), the subscriber has to place 
his smartcard in a card reader at the mobile telephone 

particular smartcard, the mobile transmits the IMSI (read 
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from the card) to the appropriate base station so as to 
enable the system to record the location of the 
particular mobile. However, it is also necessary, of 
course, for the system to be aware of the MSISDN 
associated with that IMSI, so that, for example, an 
incoming call for that particular mobile (which the 
caller will initiate using the called subscriber's 
MSISDN) can be correctly routed. 

Subscribers to the system will normally subscribe via a 
dealer who will be the intermediary between the 
subscriber and the network operator. In practice, there 
will be a relatively large number of such dealers. Each 
dealer will be issued by the network operator with a 
batch of smartcards, each bearing a pre-programmed IMSI 
(and other information such as the PIN and security 
data), none of which is externally visible. In addition, 
the card will have an identifying serial number embossed 
on it and thus readily visible. The dealer will issue a 
new subscriber with one of these smartcards, selected at 
random, and will issue the subscriber with an MSISDN 
provided by the network operator. The dealer will inform 
the network operator of the embossed (visible) serial 



smartcard with the corresponding MSISDN - but this 
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information will be unknown to anyone else. 

In practice, smartcards are likely to need replacement, 
because of wear, after, say, two years. In addition, 
some of them are likely to be lost or damaged and will 
have to be replaced. When a subscriber wishes to have 
his smartcard replaced, he will return to the dealer who 
will select a fresh smartcard from his batch of unissued 
ones, again at random. This time, though, a new MSISDN 
will not be issued; the subscriber will retain the same 
MSISDN always, and the dealer therefore has to inform the 
network operator of the embossed (visible) serial number 
of the newly issued smart card, together with the 
(unchanged) MSISDN. The network operator again therefore 
knows the IMSI associated with that MSISDN but, as 
before, no one else does. 

In this way, only the minimum information is known to the 
dealer (and subscriber) and security is maximised. 
However, the effect of this is that the relationship 
between each IMSI and the corresponding MSISDN is 
substantially random. The system therefore has to store, 
in a "home location register" (HLR) , information for 
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activated within the network (in the manner described), 
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thus transmitting its IMS I into the network, the network 
has to be able to record the location of that subscriber, 
not only identifying the subscriber by the IMS I but also 
by the associated MSISDN (in order, for example, to 
enable incoming calls to be correctly directed to that 
subscriber) . 

The Figure shows part of the network in simplified form. 
As shown, there are a plurality of base stations (BS) 5, 
each serving a particular geographical location or cell. 
A mobile service switching centre (MSC) 6 is connected to 
a group of the base stations 5 via wired connections, 
each MSC serving some, only, of the base stations within 
the total network. Each MSC has associated with it a 
visitor location register (VLR) 8 to which it is 
connected by a wired connection. In addition, the system 
contains a "home location register" (HLR) 10. 

The HLR comprises fixed data storage having a separate 
storage location for each subscriber. Within each such 
location is stored the MSISDN for the subscriber and the 
associated IMS I, together with other subscriber data. 
When a mobile subscriber (MS), as indicated 



already explained), the MSC 6, in the manner to be 
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explained, causes the correct location in the HLR to be 
examined and the correct subscriber's data, including the 
correct MSISDN, to be extracted and stored temporarily in 
a location in the VLR 8. Therefore, when a call is made 
by or to that particular MS, the MSC 6 has all the 
necessary information in the VLR 8 in order to set up the 
call and to issue the appropriate billing information. 

Successful operation for the procedure described above 
requires the VLR to be able to respond to an incoming 
IMSI by accessing the correct location in the HLR. As 
explained above, the relationship between each IMSI and 
its MSISDN is completely random. There therefore has to 
be an "analysis table" in the network which associates 
each IMSI with the corresponding location in the HLR . 
One way of achieving this would be for each VLR to hold 
such an analysis table and to use it, in response to 
receipt of each IMSI , to identify the corresponding HLR 
location and thus to extract the correct subscriber 
data. However, each such analysis table would have to 
have an entry for every individual IMSI currently 
allocated in the network (that is, one for each 
subscriber), and this could eventually become very large 



This problem could of course be overcome if there were 
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always a direct relationship between the IMS I and the 
MSISDN, Therefore, upon receipt of a particular IMSI the 
VLR could extract the corresponding MSISDN and use this 
to access the correct location in the HLR . However, such 
an arrangement would have the effect that each smartcard 
would be particular to a specific MSISDN which would 
complicate issuance and replacement of smartcards. In 
order to preserve constancy of the MSISDN, the 
replacement smartcard would have to be individually 
manufactured so as to have the correct IMSI. If this 
were done by the network operator, the subscriber would 
be faced with unacceptable delay when the need for a 
replacement smartcard arose. It would be unacceptable on 
security grounds to permit the dealer to manufacture the 
replacement card. Such an arrangement would also be 
wasteful because it would require the network operator to 
provide resources on the network not only for active 
subscriptions but also for potential subscriptions 
represented by the unissued smartcards. 

In order to deal with this problem, therefore, the 
analysis table is not maintained at each of the VLR but a 
single analysis table is distributed throughout the 



within the network, such as at a particular MSC (or ot 
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signalling element). When an IMS I is received from a 
mobile subscriber entering the network, the IMSI is 
analysed to derive, directly from it, a "Global Title" 
which is used as a means of accessing the correct part of 
the analysis table. Each node stores not only part of 
the analysis table but also information indicating where 
the remaining parts of the analysis table are stored. 
Therefore, the first node receiving the Global Title 
corresponding to a particular IMSI analyses the Global 
Title to decide whether it corresponds to a particular 
IMSI for which the detailed analysis table is stored at 
that node. If that is found to be the case, then the HLR 
location is extracted and the message forwarded to that 
HLR. However, if the node finds that the Global Title 
corresponds to an IMSI which is not included in the part 
of the analysis table which it stores, it knows which 
other part of the network (that is, which other node) is 
storing the part of the analysis table corresponding to 
that IMSI and produces routing information which forwards 
the enquiry message to that node. The HLR location can 
thus be correctly located as before. 

When a replacement smartcard is issued to a subscriber, 
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enquiry messages to the correct location in the HLR, this 



12 



up-dating being in addition to the up-dating which is 
carried out on that particular location in the 

HLR . 



13 



CLAIMS 



1. A telecommunication network by means of which a 
plurality of subscribers may communicate with each other, 
each subscriber having a token by means of which they may 
respectively identify themselves to the network, each 
token causing a unique secure identification number to be 
input into the network, comprising main storage means 
having a plurality of storage locations each for storing 
a respective one of the secure identification numbers and 
a corresponding access number by which the subscriber 
which has the token associated with that identification 
number may be accessed via the network, further storage 
means split into parts each of which is located at a 
different position in the network and each for storing a 
respective part only of an analysis table which links 
each identification number with the identity of the 
corresponding one of the storage locations of the main 
storage means, accessing means responsive to each 
identification number input into the system for accessing 
the relevant part of the further storage means and 
extracting from the part of the analysis table stored 
there the address of the corresponding one of the storage 



corresponding access number whereby to enable calls to 
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and from that subscriber to be set up and permitting a 
random relationship between the identification numbers 
and the access numbers. 

2. A network according to claim 1, in which each token 
is a smartcard. 

3. A network according to claim 1 or 2, in which each 
said part of the further storage means also stores 
information identifying the locations on the other parts 
of the further storage means and the respective 
identification numbers corresponding thereto. 

4. A network according to any preceding claim, in the 
form of a cellular telephone network for mobile 
subscribers and in which the access numbers are the 
subscribers' telephone numbers. 

5. A network according to claims 3 and 4, including a 
plurality of visitor location registers each associated 
with some of the cells of the network, and in which the 
main storage means comprises a home location register for 
at least part of the network, some at least of the said 



network, and in which the accessing means comprises means 
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associated with each such node for responding to a 
particular one of the identification numbers input into 
the network via one of the cells associated with a 
particular one of the visitor location registers for 
determining whether the part of the analysis table 
relevant to that identification number is held in 
association with that node and, if it is not, for 
deriving from information stored at that node the 
location of the relevant part of the analysis table and 
obtaining therefrom the address of the corresponding 
storage location in the home location register, and in 
which the extracting means comprises means for accessing 
this storage location in the home location register and 
transmitting information therefrom, including the 
subscriber's telephone number, to the visitor location 
register associated with the cell into which that 
subscriber has input the identification number. 

6. A network according to claim 5, in which some of the 
said nodes are mobile service switching centres each 
controlling some of the cells of the network and each 
having at least one of the visitor location registers 
associated with it. 
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he network by means of smartcards which cause respective 
subscriber identification numbers to be input into the 
network via the relevant cells thereof, the 
identification numbers being secure and having a random 
relationship with the subscribers' telephone numbers, 
comprising the steps of setting up, in a home location 
register, storage locations for each telephone number 
each of which also stores the corresponding subscriber 
identification number and other subscriber data, setting 
up an analysis table correlating each identification 
number with the corresponding storage location in the 
home location register, storing respective parts of this 
analysis table at different locations in the network, 
responding to an identification number input at a 
particular cell by deriving an address from the 
identification number and using this address to locate 
the relevant part of the analysis table within the 
network, obtaining therefrom the storage location of the 
home location register corresponding to the 
identification number, extracting the corresponding 
subscriber's telephone number from that storage location, 
and storing that telephone number in a visitor location 
register associated with the originating cell. 
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reference to the accompanying diagrammatic drawing. 
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9. A method of operating a cellular telephone network, 
substantially as described with reference to the 
accompanying diagrammatic drawing. 
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